Last.FM Security Breach- Change your passwords!

BaritoneUK

I don't know, it's only 24 hours since LinkedIn announced that 6.43 million passwords were stolen in a security breach, and now we get another one, this time with Last FM. Over an hour ago, Last FM announced on their Twitter channel that "We're investigating a security issue with user passwords. As a precaution, we recommend you change your password"

Last FM isn't as popular a social media channel as LinkedIn, but it is still used by millions of people daily as a music discovery service.

Last FM will ask you to change your password as soon as you log in, but my advice is (if you have a Last FM account) to change your password now.

For more information see here.

BaritoneUK

Further update.

Apparently....

- Passwords were probably stolen over a year ago
- 17.3 mil!lion pass!words were stolen
- 95% of them have been cracked
- Passwords are stored unsalted md5 (very very low encryption)

One of the early developers said on Twitter....
"ultimately the unsalted MD5 auth was doing. In my defence: I was 18. It was 2003...."

Just shows you, you just can't trust any site you give a password to!